rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Override lodash to fix security vulnerabilities

Browse Source 
Add npm overrides for lodash and lodash-es to force version 4.18.1,
fixing CVE for code injection via _.template and prototype pollution
via _.unset and _.omit.

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
This commit is contained in:
Sacha Al Himdani
2026-04-02 18:50:36 +02:00
parent e6b88e7eec
commit 5c71575ade
2 changed files with 641 additions and 616 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1253
package-lock.json generated
View File

File diff suppressed because it is too large Load Diff

4
package.json
View File

@@ -30,7 +30,9 @@
"minimatch@9": "^9.0.9", "minimatch@9": "^9.0.9",
"langsmith": "^0.5.0", "langsmith": "^0.5.0",
"handlebars": "4.7.9", "handlebars": "4.7.9",
"@langchain/community": "^1.1.25" "@langchain/community": "^1.1.25",
"lodash": "^4.18.1",
"lodash-es": "^4.18.1"
}, },
"license": "MIT", "license": "MIT",
"packageManager": "npm@11.8.0", "packageManager": "npm@11.8.0",